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(54) Methods and systems (or performing article authentication 



(57) Disclosed arc methods -md systems tor au- 
thenticating a unique art iclo utih/»iq .» oonora'.od unique 
data signature The unique data siqn<ituio »s generated 
by encrypting a received data set representative of a 
unique identification number hxc;i io n substantially un- . 
forgeable document The uniqun cUU« signature is fixed 



to the unique article or to an optionally generated own- 
ership certificate or the like. The unforgeable document 
is retained, possibly as the ownership certificate, or the 
like; or as a part thereof, to thereby authenticate the 
unique article. 
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Description 

TECHNICAL FIELD OF THE INVENTION 

The present invention relales in general to security 
methods and systems, and more particularly to methods 
and systems for generating and utilizing a unique data 
signature tor authenticating a unique article. 

BACKGROUND 

Throughout modern lite, each person authors, cre- 
ates, uses, earns, and may even be legally required to 
carry, a variety of unique articles. A unique article, as 
used herein, shall mean one or more of the following, 
but is not limited to, any singular, original, particular, 
lone, sole, and/or genuine item, instrument or document 
having a surface, which may include a substrate, to 
which data, intelligence, facts, expressions, works of au- 
thorship, or other information may be fixed Fixed, as 
used herein, shall mean one or more of the following, 
but is not limited to, attached, imprinted, adhered, 
carved, painted, penned, etched, mounted, inserted, 
deposited, scratched, sculpted, or otherwise imaged, 
arranged, placed molded, or positioned. 

In many instances, the need arises to conveniently, 
rapidly, and credibly verify the authenticity of a unique 
article under consideration. To determine if the particular 
unique article is authentic, it is often necessary to deter- 
mine whether the party claiming ownership of the article 
is in rightful possession, and that the article is in fact 
unique. For instance, assume that a party claiming to 
be the owner of a unique work of art, such as, a painting 
or sculpture, for example, and a prospective purchaser 
of same enter into a sales agreement A diligent pur- 
chaser will attempt to verify the authenticity of the work 
of an, as well as, the rightful possession of the selling 
party. 

Unfortunately, many unique articles, such as origi- 
nal paintings, sculptures, antiques, artifacts, etc. are of- 
ten copied, duplicated or reproduced, either manually 
or wilh the assistance of a conventional processing sys- 
tem based copying or image reproduction device Fur- 
ther, registration ot unique articles, coupled with the sub- 
sequent issuance of certificates of ownership, verifica- 
tion certificates, deeds, title papers, and the like are in- 
effective, as these documents are easily forged, coun- 
terfeited, simulated, etc. Thus, the issuance of certifi- 
cates of ownership and other similar methods of authen- 
tication are brittle, meaning that once the certificate of 
ownership, verification certificate, deed, title paper, or 
the like is circumvented, the limited scope of protection 
previously afforded is gone 

SUMMARY OF THE INVENTION 

In accordance with the principles of the present in- 
vention methods and systems are provided for creating, 



and subsequently verifying, the authenticity of a unique 
" article Preferably, this is accomplished through the uti- 
lization of a data set representative ot a unique identifi- 
cation number. The unique identification number is pref- 
5 erably fixed to a substantially unforgeable document. 
The unique identification number is also preferably en- 
crypted in accordance wilh conventional cryptography 
techniques. 

One method for authenticating a unique article in 

io accordance with the principles of the present invention 
concerns initially receiving a data set which includes at 
least one data subset, wherein a first data subset is rep- 
resentative of a unique identification number fixed to a 
surface of a substantially unforgeable document. The 

15 input data sel is then encrypted to generate a unique 
data signature, preferably utilizing a public -private key 
cryptography process. The unique data signature is 
then fixed to the unique article and/or a verification cer- 
tificate, to thereby authenticate the unique article. 

20 a method for authenticating an original work of au- 
thorship in accordance with the principles of the present 
invention concerns receiving both a first and a second 
data set; encrypting the first data set, and preferably at 
least a portion of the second data set, to generate a 

25 unique data signature, and fixing the unique data signa- 
ture to a surface of the original work of aulhorship and/or 
a verification certificate. The first data set is preferably 
representative of a unique identification number, or se- 
rial number, of a currency note, and Ihe second data set 

30 preferably includes at least one textual data subset. 
Preferably, the encryption process utilizes public-private 
key cryptography to generate the unique data signature. 

One system for authenticating a unique article in ac- 
cordance with the principles of the present invention 

35 concerns a processing system including both a receiv- 
ing means and a processing means The receiving 
means operates to receive an input data sel including 
at least one data subset, wherein a first data subset rep- 
resents a unique identification number fixed to a sub- 

40 stantialty unforgeable document. The processing 
means generates a unique data signature, preferably by 
encrypting at least a portion of the input data set to gen- 
erate the unique data signature. The encryption proc- 
esses preferably includes the utilization of public-private 

^5 key cryptography. 

One embodiment for using and/or distributing the 
present invention is as software stored to a storage me- 
dium. The software includes a plurality of computer in- 
structions for controlling at least one processing unit for 

50 generating a unique data signature for authenticating a 
unique article in accordance with the principles of the 
present invention The storage mediums utilized may in- 
clude, but are not limited to, magnetic, optical, and sem- 
iconductor chip. Alternate preferred embodiments of the 

55 present invention may also be implemented in firmware 
or hardware, to name two other examples. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

For a more complete understanding of the present 
invention and ihe advantages thereof, reference is 
made (o (he following descriptions taken in conjunction 
wilh Ihe accompanymq drawings in which like numbers 
dcsiqna:c I ke pa'ts and rn which; 

Ficj I illustrates a flow diagram ol a method of secu- 
nly tor dealing arid subsequently verifying, the 
aulhcnboy ol a unique article; 
Fig 2 illustrates ho artist's rendition of a one dollar 
bill h.ivmci a unique scnal number fixed thereto; 
Fig 3 iiHiilr.iles an isometric view of a personal 
computer rn corporation with convenlional scan- 
ning -inc) crrMic.iio issuance devices, in accord- 
ance w«th in..< principles of Ihe present invention; 
and 

Fig a iHuMMtcs a bkx ^ diagram of a microprocess- 
ing sysjiur-i riLitxJ»r»q -i s»ngle processing unit and 
a sif>u*c rr «,rr«_,ty *\-jt device, which may be uti- 
h/ed » cc*i|unc'»c- w ih the personal computer in 
Fig 3 

DETAILED DESCRIPTION OF THE INVENTION 

The principles o' me picscnt invention, and the fea- 
tures and advantages thereof are belter understood by 
referring io Iho itlu^lrrtirvl rmN~*i mont depicted in Figs. 
1-4 of the Orawmqs 

Fig 1 illustrates a flow diagram of one preferred 
method ol security for creatine and subsequently Veri- 
fying the authenticity ol a unique article, such as a work 
of authorship like a painhrq or. sculpture, as examples. 
A work of authorship more particularly includes, but is 
not limited to original literary works, such as manu- 
scripts, for example as wo I as unique pictorial, graphic 
and -sculptural works Preferably the method steps 
herein illustrated are programmed tn a suitable high-lev- 
el programming language compiled into object code, 
and subsequently loaded onto a processing syslem, 
such as a personal computer lor utilization. One pre- 
ferred processing system illustrated in cooperation with 
conventional scanning and certificate issuance devices, 
utilized tn accordance with the principles ol the present 
invention, will be discussed tn detail with reference to 
Figs. 3 and 4 Alternatively ihe principles of the present 
invention may be embodied within any suitable arrange- 
ment of firmware or hardwate. as previously introduced. 

Upon entering the START block, the process be- 
gins. An input data set having at least one data subset 
is received, input/output block 101. Preferably, the data 
subset is representative ol a unique identification 
number from a substantially unforgeable document. A 
unique identification number more particularly is any 
string ol characters, including numbers and/or letters, 
or other cognizable symbols . which operates to uniquely 
classily. describe, name, confirm, substantiate and/or 



identify the substantially unforgeable document, such 
as', for example, a serial number. A substantially un- 
forgeable document more particularly is any unique cer- 
tificate, charter, license, chronicle, rec&rd, deed, draft, 

5 bill, or the like, which has been prqduced in a manner 
to prevent, inhibit, discourage, etc. the fraudulent repro- 
duction or alteration of same wilh ah intent to prejudice 
the rights of another, such as, for example, a currency 
note or other similar instrument. Fig. 2 illustrates an art- 

10 isi's rendition of a one dollar bill 200 having a unique 
serial number 201 fixed thereto. 

In alternate preferred embodiments, the input data 
set may also include other data subsets, such as, for y 
example, one or more textual data subsets. Such textual 

is data subsets may include, but are not limited to, for ex- 
ample, one or more of the following, the name of the 
creator of the unique article, such as the author of an 
original work of authorship; a creation date of the unique 
article; the name or title of the unique article; the name 

20 ol the country of origin, if the substantially unforgeable 
document is a currency note; a serial number of a veri- 
fication certificate which may be produced as part of the 
authentication process; a description of the verification 
certificate, if produced; etc. It should be noted that, when 

2£ the input data set is comprised of more than one data 
subset, the data subsets need not be received simulta- 
neously. Accordingly, an aspect of the present invention 
is that data set and/or subset collection need not occur 
coincidentally. 

30 A determination is preferably made whether more 

than one data subset exists, decisional block 102. If 
more than one data subset exists, YES branch of deci- 
sional block 102, then if the two or more data subsets 
are to be combined. YES branch of decisional block 1 03, 

35 then the data subsets are preferably concatenated to- 
gether, interleaved, or otherwise combined to form a sin- 
gle data subset, processing block 104 The single data 
subset produced in block 104, or the single data subset 
representative of the unique identification number, NO 

.40 branches of decisional blocks 1 02 and 1 03, is encrypted 
to generate a unique data signature, processing block 
105. 

Cryptographic processes typically transform data 
through the use of two basic elements, a cryptographic 

45 algorithm and keys. The cryptographic algorithm gener- 
ally includes procedures for encoding and decoding 
data sets and subsets. These encoding and decoding 
procedures may be identical or may consist of the same 
steps performed in reverse order. The keys, which are 

50 often selected by a user, generally consist of a sequence 
of characters, such as letters and/or numbers, and/or 
other cognizable symbols, which are used by the cryp- 
tographic process to encode and decode the data sets 
and subsets. One conventional cryptography process is 

55 the single key process. In accordance with this process, 
a single key is used for both data encoding and decod- 
ing In order to ensure protection, however, the key must 
be kept secret. This is the Data Encryption Standard 
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("DES") single key technique, a standard accepted by 
the National Bureau of Standards, and which is accord- 
ingly known. Another conventional cryptography proc- 
ess is a public-private key process. This preferred proc- 
ess utilizes two keys, instead of using a single key for 
both data encoding and decoding. One key is used to 
encode the data sets and subsets, while the other is 
used to decode the data sets and subsets. One key typ- 
ically is made public and one key is kept private. It the 
public key is used to encode the data sets and subsets, 
then the private key is used to decode the data sets and 
subsets and vice versa. An aspect in accordance with 
this process therefore is the substantially impossible de- 
duction of the private key from the public key and known 
encrypted text, and vise versa. Preferably, the unique 
data signature is generated utilizing a public-private key 
cryptography process, the techniques for performing 
such are also known. Public-private key cryptography is 
more lully discussed in "Untangling Public-Key Cryptog- 
raphy," by B. Schneier, Dr. Dobb's Journal , vol. 17, no. 
5, May 1992, "Debating Encryption Standards, u Com- 
munications of the ACM , vol. 35 ; no. 7, July 1992; and 
"The Idea Encryption Algorithm," by B. Schneier, Dr Do- 
bb's Journal , vol. 1 8, no. 13, December 1 993, which are 
incorporated herein by reference. The unique data sig- 
nature is then fixed to the unique article and/or to an 
optionally produced verification certificate, thereby au- 
thenticating the unique article, input/output block 106. 
Preferably, the substantially unforgeable document is 
attached to a certificate of ownership, or the like. Re? 
gardless, the substantially unforgeable document must 
be retained. 

Note that the data encryption and decryption tech- 
niques discussed herein are presented for illustrative 
purposes only, and although the public-private key proc- 
ess is preferred, any suitably arranged cryptography 
techniques in accordance with the principles of the 
present invention may be substituted for, or utilized in 
addition to, those described herein. 

Fig. 3 illustrates an isometric view of a personal 
computer 300, optionally coupled with conventional 
scanning and certificate issuance devices 309 and 310, 
in accordance with the principles ol the present inven- 
tion. Personal computer 300 is comprised ol a hardware 
casing 301 (illustrated having a cut-away view), a mon- 
itor 304, a keyboard 305 and a mouse 308. Note that 
the monitor 304, and the keyboard 305 and the mouse 
308 may be replaced by, or combined with, other suita- 
bly arranged output and input devices, respectively 
Hardware casing 301 includes both a floppy disk drive 
302 and a hard disk drive 303. Floppy disk drive 302 is 
operable lo receive, read and write to external disks, 
while hard disk drive 303 is operable to provide fast ac- 
cess data storage and retrieval In one preferred em- 
bodiment, a unique identification number, such as the 
serial number 201 fixed to the dollar bill 200 illustrated 
in Fig. 2, is scanned utilizing the scanning device 309. 
In an alternate preferred embodiment, the unique iden- 



tification number from the substantially unlorgeable 
document is inpul utilizing the keyboard 305 In other 
preferred embodiments, the unique identification 
number is received via an input/output drive and/or a 
5 data port. Accordingly, although only floppy disk drive 
302 is illustrated, personal computer 300 may be 
equipped with any suitably arranged structure for receiv- 
ing and/or transmitting data, including, for example, tape 
and compact disc drives, and serial and parallel data 
to ports. Within the cut away portion of hardware casing 
301 is a processing unit 306, coupled with a memory 
storage device 307, which in the illustrated embodiment 
is a random access memory ("RAM"). Although person- 
al computer 300 is shown having a single processing 
J5 unit 306, personal computer 300 may be equipped with 
a plurality processing units 306 operable lo cooperative- 
ly carry out the principles of the present invention. Sim- 
ilarly, although personal computer 300 is shown having 
the single hard disk drive 303 and memory storage de- 
20 vice 307, personal computer 300 may be equipped with 
any suitably arranged memory storage device, oi plu- 
rality thereof. Further, although personal computer 300 
is utilized to illustrate a single embodiment of a process- 
ing system, the principles of the present invention may 
2S be implemented wilhin any processing system having 
at least one processing unit, including, but not limited 
to, sophisticated calculators and hand held, mini, mam 
frame and super computers, including RISC and parallel 
processing architectures, as well as wilhin processing 
30 system network combinations ol the foregoing. 

Once processing system 300 has generated the 
unique data signature, the conventional certificate issu- 
ance device 310 may optionally be utilized to generate 
a certificate ol ownership, to which the data subset rep- 
35 resentation of the unique identification number and/or 
the unique data signature may be fixed. In one preferred 
embodiment, the substantially unforgeable document is 
also fixed to the certificate of ownership Regardless, 
the substantially unforgeable document must be re- 
40 tained for subsequent authentication. 

In another alternate embodiment, the scanning and 
certificate issuance devices 309 and 31 0 are combined, 
or alternately cooperate, such that the substantially un- 
forgeable document is received, the unique idenlilica- 
45 tion number is scanned, and in conjunction with the gen- 
eration of the unique data signature, a verification or 
ownership certificate, or the like, is produced which in- 
cludes the substantially unforgeable document In other 
words, the substantially unforgeable document is insert- 
50 ed into, enclosed within, fixed to or otherwise made part 
of the verification or ownership certificate. 

Fig. 4 illustrates a block diagram of one micro- 
processing system, including a processing unit and a 
memory storage device, which may be utilized in con- 
55 junction with personal computer 300 The micro- 
processing system includes a single processing unit 1 06 
coupled via data bus 403 with a memory storage device, 
such as RAM 307, for example. Memory storage device 
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307 is operable to store one or more processing system 
instructions which processing unit 306 is operable to re- 
trieve, interpret and execute. Illustrative processing unit 
306 includes a control unit 400, an arithmetic logic unit 
("ALU") 401, and a local memory storage device 402, 
such as, for example, stackable cache or a plurality of 
registers. Control unit 400 is operable to fetch the in- 
structions liom memory storage device 307. ALU 401 is 
operable to perform a plurality of operations, including 
addition and Boolean AND needed to carry out instruc- 
tions Local memory storage device 402 is operable to 
provide local high speed storage used for storing tem- 
porary results and control information. 

Although -the present invention and its advantages 
have been described in detail, it should be understood 
that various changes, substitutions and alterations can 
be made herein without departing from ihe spirit and 
scope of the invention. 



Claims 

1. A method for authenticating a unique article, said 
method comprising the steps of: 

receiving a data set including at least one data 
subset wherein a first data subset is represent- 
ative of a unique identification number fixed to 
a surface of a substantially unforgeable docu- 
ment; and 

encrypting said input data set. to generate a 
unique data signature and fixing said unique 
data signature to at least one of said unique 
article and a verification certificate, to thereby 
authenticate said unique article. 

2. The method as set forth in claim 1 further including 
the step of retaining and attaching said substantially 
unforgeable document to said verification certifi- 
cate 

3. The method as set forth in claim 1 wherein said sub- 
stantially unforgeable document is a currency note 
including a serial number, and said method further 
includes the step of scanning said unique serial 
number 

4. The method as set forth in claim 1 wherein said 
encryption step further includes the step of utilizing 
a public-private key cryptography algorithm 

5. The method as set forth in claim 1 further including 
the step of combining a second data subset with 
said first data subset, said second data subset 
including textual data. 

6. The method as set forth in claim 5 further including 
the step of fixing at least a portion of said second 



data subset to said verification certificate. 

7. The method as set forth in claim 5 further including 
the step of fixing at least a portion of said second 

5 data subset to said unique article. 

8. A method for authenticating an original work of 
authorship, said method comprising the steps of: 

io receiving a first data set representative of a 

unique identification number of a currency note 
and a second data set including at least one 
textual data subset; 

encrypting said first data set and at least a por- 
fs |jon of said second data set utilizing public -pri- 

vate key cryptography to generate a unique 
data signature; and 

fixing said unique data signature to a surface 
of at least one of said original work of author- 
20 ship and a verification certificate. 

9. The method as set forth in claim 8 wherein said 
encryption step is preceded by the step of combin- 
ing said first and second data sets. 

2S 

10. The method as set forth in c\a'tm 8 further including 
the step of retaining and attaching said currency 
note to said verification certificate. 

30 11. The method as set forth in claim 8 wherein said 
receiving step is preceded by the step of reading 
said unique identification number from a surface of 
said currency note. 

35 12. The method as set forth in claim 8 wherein said sec- 
ond data set includes at least one textual data sub- 
set selected from the group consisting of: 

a name of the author of said original work of 
40 authorship; 

a creation date of said original work of author- 
ship; • 

a title of said original work of authorship; 
a name of the country of origin of said currency 
^5 note; 

an identification number of a verification certif- 
icate; and 

a description of said verification certificate. 

£0-13. A processing system for authenticating a unique 
articfe, said processing system comprising: 

means for receiving an input data set including 
at least one data subset, wherein a first data 
55 subset represents a unique identification 

number fixed to a substantially unforgeable 
document; and 

processing means for generating a unique data 
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signature said processing means operable to 
encrypt at least a portion ot said input data set 
to generate said unique data signature. 

14. The processing system as set forth in claim 1 3 fur- 5 
tnor comprising at least one memory means lor 
storing a ptuiatity ot processing system instructions 

, and whcrem said processing means is further oper- 
able lo receive and execute one or more processing 
systerr instructions, said processing system 10 
msiiuc iors directing said processing means to 
genomic s.-ud unique data signature. 

15. The processing system as set forth in claim 13 
whcfon s.»i:J processing means is further operable is 
lo Liiti/e i public private key cryptography algo- 
rithm 

16. The processing system as set forth in claim 13 
whciei-i t^io »ipui Uiiri sijt includes a second data 20 
sublet mi j t»o pioi.uui.tng means is further oper- 
able to come nc s*t*d in st nnd second data subsets. 

17. The proccs:,«ng system .is set torth in ciairn 13 fur- 
ther compnsmq . ill. icrung means for fixing said 25 
unique cur* Licjn.iiuro to s^id unique article 

18. The processing system as set forth in claim 1 3 fur- 
ther rompnsnq r>r muring moans tor generating an 
ownership or ml cato 30 

19. The processing system as set forth in claim 18 fur- 
ther comprising attaching means for fixing said 
unique data siqnaluic to said ownership certificate. 

35 

20. The processing system as sel lorth in claim 13 
wherein sard substantially unforgeable document is 
a currency note and said receiving means further 
includes means for scanning a serial number fixed 

to a surface of said currency note -*0 
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